The Cyber Resilience Act in your industry

Applicability depends on the product; the industry determines the typical cases: products with digital elements, the likely Annex III class, relevant standards and legal acts (IEC 62443, ETSI EN 303 645, RED-DA) and the SBOM reality per sector.

Kontakt aufnehmen

CRA in consumer IoT & smart home

CRA for smart-home makers: routers, cameras and smart locks in Annex III class I, ETSI EN 303 645, RED-DA delineation and SBOM. Clarify your scope now.

CRA in building technology & building management systems

CRA for building automation and BMS: PDE scope, Annex III class, IEC 62443 and SBOM in KNX/BACnet systems. With a practical example - check your duties now.

CRA in energy & smart metering

CRA for energy and smart metering: the smart meter gateway as a critical product under Annex IV, notified body, IEC 62443 and SBOM duty. Assess your scope.

CRA in electronics manufacturing, EMS & supply

CRA for EMS providers and OEM suppliers: who is the manufacturer? PDE components, Annex III class and SBOM hand-off in the supply chain.

CRA in charging infrastructure & e-mobility

CRA for charging infrastructure: wallboxes and chargers as PDE, Annex III class, OCPP/ISO 15118, IEC 62443 and SBOM reality. With an example - check now.

CRA in robotics & drones

CRA for robotics and drones: PDE scope, Annex III class, IEC 62443, delineation from the Machinery Regulation/EASA and SBOM reality. Check your scope now.

CRA for payment & POS terminals

CRA for payment hardware: physical payment terminals as critical products under Annex IV, relationship to PCI PTS/PCI DSS and SBOM. Clarify your duties now.

CRA for network & security hardware

CRA for network and security hardware: firewalls as Annex III class II, VPN/routers/SIEM/PKI as class I, IEC 62443 and SBOM reality. Determine your class now.

CRA for AI & ML products

CRA for AI/ML products: when an AI product is a PDE, the relationship to the AI Act, AI models in the SBOM and adversarial risks. Assess your case now.

CRA & automotive: the delineation

CRA and automotive: what falls under Type-Approval Regulation (EU) 2019/2144 is exempt, but retrofit and accessory parts may be covered. Clarify the line now.

CRA & telecom/radio equipment: RED-DA delineation

CRA and radio equipment: the RED Delegated Act (Reg. (EU) 2022/30) applies since 08/2025 and is repealed on 11 Dec 2027. What applies until then.

Get in touch

Request an industry-specific CRA assessment

We assess the Annex III class of your product lines technically, clarify the delineation from standards and neighbouring regimes and build the SBOM and reporting chain with your teams - concrete for your sector.

Request an initial call